Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          E2ujWVQmV4UpFUD3AX7c75sEE5vylXia2KnewA5AJOw=
Subject key identifier:   50:DB:ED:25:DD:11:22:6A:A2:3F:94:EC:10:3D:60:5D:C3:10:89:77
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0888
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          0888
Signing time:             Mon 28 Apr 2025 01:37:14 +0000
Manifest this update:     Mon 28 Apr 2025 01:37:13 +0000
Manifest next update:     Wed 30 Apr 2025 01:37:13 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: ihRPqY2yc68rdR99loqLJuVg3NsledC5tu6Apy3QPLU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Apr 28 01:37:13 2025 GMT
            Not After : Apr 30 01:37:13 2025 GMT
        Subject: CN=680edbca-6512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:b8:6f:83:58:14:4d:cc:8e:6f:b8:12:4e:
                    fd:35:d3:5b:9a:02:4d:07:9a:bf:15:d0:2f:0b:f4:
                    57:28:31:64:1b:9a:28:e4:9a:11:22:74:e9:9d:96:
                    ea:81:ec:42:91:6c:25:dc:fd:a1:14:dc:91:3f:c3:
                    c0:15:4a:92:91:6e:49:c7:a8:f0:ea:ad:1d:94:ec:
                    8a:68:f6:8f:7b:0a:e1:f4:8b:52:ed:1f:cb:86:33:
                    18:1e:a8:22:dd:f4:f6:0d:ac:3b:b2:da:93:b4:a5:
                    51:83:2b:30:d9:6c:6f:46:92:0d:1f:1d:be:a1:f7:
                    16:f9:a7:77:76:d7:80:6c:b7:b7:0b:fb:ca:a3:a7:
                    ff:b0:83:d7:42:ee:2d:12:40:bd:9d:7d:90:9a:54:
                    5b:04:7b:7d:ea:30:ff:d4:98:59:98:11:71:ca:41:
                    46:3f:2d:5f:cc:be:15:12:92:de:d3:3a:49:ae:1a:
                    d3:78:b0:8b:7e:95:5f:56:fe:cf:ed:9a:99:e3:91:
                    a1:5b:5a:56:d5:db:5f:ce:0a:11:11:c4:7d:0d:15:
                    d8:3f:7d:f4:3e:b2:2d:7c:6e:65:17:ce:4c:ff:9a:
                    12:84:8d:09:82:98:17:80:d0:04:8c:48:eb:2d:27:
                    91:c0:27:47:c9:a8:2b:69:23:c0:ad:bd:48:ef:ed:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DB:ED:25:DD:11:22:6A:A2:3F:94:EC:10:3D:60:5D:C3:10:89:77
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:94:0d:c9:17:5a:23:e7:4d:e9:35:c5:b4:91:b5:54:de:c1:
         73:2f:f1:da:f9:73:f9:2b:06:12:b2:02:01:90:29:2c:b7:ab:
         d4:24:95:1b:82:3a:30:92:2d:1c:73:2f:b0:7e:44:2c:27:31:
         14:f4:1f:7c:81:12:e3:94:03:4f:2b:c0:24:b8:1b:4e:51:3c:
         f9:73:43:e1:2d:3b:49:7e:c8:b8:39:60:7b:fe:7a:a0:52:e4:
         24:f0:a2:b0:44:50:08:82:56:77:bd:65:97:f9:2c:de:07:c1:
         fe:fd:4a:2c:24:fa:81:a8:73:ee:5f:25:a0:31:6c:46:04:f9:
         72:0a:ba:a6:87:bd:ae:3c:19:e0:8f:d7:1e:84:e4:63:cf:92:
         d8:72:e8:06:72:ee:af:a9:96:85:6c:e1:98:2c:f3:c6:d7:46:
         c6:72:8c:7a:f9:59:00:21:7e:01:86:2f:53:3b:9e:d3:6a:7e:
         26:51:15:95:c8:60:a9:e6:b6:16:42:84:6b:ed:49:66:48:b8:
         38:24:bd:83:cb:54:44:c9:8e:1b:67:c2:ed:75:48:48:42:a3:
         66:86:e8:15:9d:79:bc:17:33:30:ca:d5:2a:a5:ca:15:01:7f:
         6a:37:18:60:3b:2a:83:7c:8d:62:5c:e2:f4:60:55:13:7e:14:
         2e:07:f3:c0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjBDMTRBRjExMC8GA1UEBRMoQUUxNUU2MzU1QjA4NEE5M0VCQTIxQzRBOURENjFC
Q0RDMjU4QjU5RTAeFw0yNTA0MjgwMTM3MTNaFw0yNTA0MzAwMTM3MTNaMBgxFjAU
BgNVBAMTDTY4MGVkYmNhLTY1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC53rhvg1gUTcyOb7gSTv0101uaAk0Hmr8V0C8L9FcoMWQbmijkmhEidOmd
luqB7EKRbCXc/aEU3JE/w8AVSpKRbknHqPDqrR2U7Ipo9o97CuH0i1LtH8uGMxge
qCLd9PYNrDuy2pO0pVGDKzDZbG9Gkg0fHb6h9xb5p3d214Bst7cL+8qjp/+wg9dC
7i0SQL2dfZCaVFsEe33qMP/UmFmYEXHKQUY/LV/MvhUSkt7TOkmuGtN4sIt+lV9W
/s/tmpnjkaFbWlbV21/OChERxH0NFdg/ffQ+si18bmUXzkz/mhKEjQmCmBeA0ASM
SOstJ5HAJ0fJqCtpI8CtvUjv7WlJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUNvt
Jd0RImqiP5TsED1gXcMQiXcwHwYDVR0jBBgwFoAUrhXmNVsISpProhxKndYbzcJY
tZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYwQzE0L0NBRDVGMzYyOUJGQTExRTlCMUJGQzE3OUY4QUVBMjI4L3JoWG1O
VnNJU3BQcm9oeEtuZFliemNKWXRaNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JoWG1OVnNJU3BQcm9oeEtuZFliemNKWXRaNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjBDMTQvQ0FENUYzNjI5QkZBMTFFOUIxQkZDMTc5RjhB
RUEyMjgvcmhYbU5Wc0lTcFByb2h4S25kWWJ6Y0pZdFo0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXlA3JF1oj503pNcW0kbVU3sFzL/Ha
+XP5KwYSsgIBkCkst6vUJJUbgjowki0ccy+wfkQsJzEU9B98gRLjlANPK8AkuBtO
UTz5c0PhLTtJfsi4OWB7/nqgUuQk8KKwRFAIglZ3vWWX+SzeB8H+/UosJPqBqHPu
XyWgMWxGBPlyCrqmh72uPBngj9cehORjz5LYcugGcu6vqZaFbOGYLPPG10bGcox6
+VkAIX4Bhi9TO57Tan4mURWVyGCp5rYWQoRr7UlmSLg4JL2Dy1REyY4bZ8LtdUhI
QqNmhugVnXm8FzMwytUqpcoVAX9qNxhgOyqDfI1iXOL0YFUTfhQuB/PA
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:33 2025 by rpki-client on console.sobornost.net